https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T19:23:50.743903+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-196389 EUVD-2026-196389 2026-10-27T19:23:50.746503+00:00 EUVD-2026-196389 https://cve.radiocsirt.org/vuln/fkie_cve-2023-36260 fkie_cve-2023-36260 2026-10-27T19:23:50.746532+00:00

An issue was discovered in the Feed Me plugin 4.6.1 for Craft CMS. It allows remote attackers to cause a denial of service (DoS) via crafted strings to Feed-Me Name and Feed-Me URL fields, due to saving a feed using an Asset element type with no volume selected. NOTE: this is not a report about code provided by the Craft CMS product; it is only a report about the Feed Me plugin. NOTE: a third-party report states that commit b5d6ede51848349bd91bc95fec288b6793f15e28 has "nothing to do with security."

 https://cve.radiocsirt.org/vuln/ghsa-6p78-f7h9-6838 GHSA-6p78-f7h9-6838 — Craft CMS Feed-Me 2026-10-27T19:23:50.746614+00:00

Affected: Packagist: craftcms/cms

An issue discovered in Craft CMS version 4.6.1.1 allows remote attackers to cause a denial of service (DoS) via crafted string to Feed-Me Name and Feed-Me URL fields due to saving a feed using an Asset element type with no volume selected.

 https://cve.radiocsirt.org/vuln/gsd-2023-36260 gsd-2023-36260 2026-10-27T19:23:50.746640+00:00 gsd-2023-36260